Update to 8.0 for fix CVE-2024-5742

nano.spec

@@ -1,23 +1,21 @@
 Name:		nano
-Version:	4.5
-Release:	4
-Summary:	Nano is now part of Apache CouchDB
+Version:	8.0
+Release:	1
+Summary:	Nano is a tiny GNU editor
 License:	GPLv3+
 URL:		https://www.nano-editor.org
-Source0:	https://www.nano-editor.org/dist/v4/%{name}-%{version}.tar.xz
+Source0:	https://www.nano-editor.org/dist/v8/%{name}-%{version}.tar.xz
 
-BuildRequires:	file-devel gettext-devel gcc git ncurses-devel sed texinfo groff
-Requires:       %{name}-help = %{version}-%{release}
+BuildRequires:	file-devel gettext-devel gcc ncurses-devel sed texinfo groff
 Conflicts:	filesystem < 3
 
 %description
-Nano is now part of Apache CouchDB.
+Nano is a tiny GNU editor
 
 %package_help
 
 %prep
-%autosetup -S git
-
+%autosetup -p1
 
 %build
 install -d build
@@ -26,9 +24,9 @@ cd build
 %configure
 %make_build
 
-sed -e 's/# set nowrap/set nowrap/' \
-    -e 's/^#.*set speller.*$/set speller "hunspell"/' \
+sed -e 's/^#.*set speller.*$/set speller "hunspell"/' \
     -e 's|^# \(include "/usr/share/nano/\*.nanorc"\)|\1|' \
+    doc/sample.nanorc >> ./nanorc
 
 %install
 cd build
@@ -37,6 +35,10 @@ rm -rf %{buildroot}%{_infodir}/dir
 rm -rf %{buildroot}%{_docdir}/nano/{nano,nano.1,nanorc.5,rnano.1}.html
 
 install -d %{buildroot}%{_sysconfdir}
+install -m 0644 ./nanorc %{buildroot}%{_sysconfdir}/nanorc
+
+mv %{buildroot}%{_datadir}/nano/extra/* %{buildroot}%{_datadir}/nano
+rm -rf %{buildroot}%{_datadir}/nano/extra
 
 %find_lang %{name}
 
@@ -48,6 +50,7 @@ install -d %{buildroot}%{_sysconfdir}
 %{_bindir}/*
 %{_datadir}/nano
 %{_infodir}/nano.info*
+%config(noreplace) %{_sysconfdir}/nanorc
 
 %files help
 %defattr(-,root,root)
@@ -58,6 +61,21 @@ install -d %{buildroot}%{_sysconfdir}
 %{_defaultdocdir}/nano/faq.html
 
 %changelog
+* Mon Jun 17 2024 yaoxin <yao_xin001@hoperun.com> - 8.0-1
+- Update to 8.0
+  * CVE-2024-5742: Avoid privilege escalations via symlink attacks
+    on emergency save file (boo#1226099)
+  * By default ^F is bound to starting a forward search, and ^B to
+    starting a backward search, while M-F and M-B repeat the search
+    in the corresponding direction. (See the documentation if you
+    want the old bindings back.)
+  * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
+    ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
+    ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
+    ^T jump to a line, ^P show the position, and ^E execute.
+  * For easier access, M-" is bound to placing/removing an anchor,
+    and M-' to jumping to the next anchor.
+
 * Sat Nov 07 2020 Ge Wang <wangge20@huawei.com> - 4.5-4
 - Set help package as nano package's install require